In Part 1, we saw the digital forensics capabilities of the BackTrack Live Linux distribution, and focused on the first phase of digital forensic analysis, known as image acquisition. We used a variety…